Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File:                     h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier:          B00MkkkGzRnMIbRJeVLGazH+V5UWczlfXEwNk6Ym2iY=
Subject key identifier:   E0:D2:BE:07:7E:F3:19:1B:7E:1D:36:22:6F:D5:D6:D7:54:D2:70:DE
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer:       /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number:          EE
Signing time:             Thu 21 Nov 2024 03:34:51 +0000
Manifest this update:     Thu 21 Nov 2024 03:34:50 +0000
Manifest next update:     Thu 28 Nov 2024 03:34:50 +0000
Files and hashes:         1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: ULkFkQlPgcDpB376oSfHMczC9r/UjOtV/wVEvZSemMg=)
                          2: 333FCDF089D611EFB0E6066DC4F9AE02.roa (hash: E1rJ+Z2LS9wVTQFbS8/DfiBOW9dGiXb1gRkH4f4HVpA=)
                          3: 00B2998A576911EEA54BD978C4F9AE02.roa (hash: XKtfIdbBkbbZhVqdTVPeZN/8HUiKc9wUcBwDD9IX78k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
        Validity
            Not Before: Nov 21 03:34:50 2024 GMT
            Not After : Nov 28 03:34:50 2024 GMT
        Subject: CN=673eaa5b-d911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:b3:d3:6b:d4:6b:0e:aa:e5:7a:5f:1f:63:
                    7a:bb:2a:07:09:37:0a:57:f3:3c:a0:da:64:e2:a2:
                    84:8a:c3:f5:42:35:fc:1b:05:73:d4:d4:40:4b:ef:
                    09:bc:15:82:e0:c0:5f:cb:ba:21:64:dd:e0:e7:90:
                    68:2c:f3:6d:0f:13:67:0d:e1:cc:02:53:4a:b8:90:
                    77:c0:cf:10:6b:41:40:91:03:24:d0:73:b7:45:99:
                    9a:de:ca:8c:12:d2:6a:25:4b:7b:96:53:03:bb:33:
                    ed:94:50:e2:43:5e:35:3d:c9:be:00:e7:2d:5e:a1:
                    46:41:a8:18:d4:b1:5e:b5:83:7b:6d:03:7e:7e:0f:
                    0e:33:be:5c:53:d0:67:c5:da:00:cc:7f:f9:1f:c4:
                    9b:c5:c6:bf:2d:43:74:a8:ad:95:26:ae:7d:7b:6e:
                    31:c3:bc:cd:21:01:79:f4:2b:45:da:04:88:40:88:
                    6a:07:92:bc:c1:bc:bb:8d:70:b9:6d:44:6d:8e:e0:
                    29:2e:9a:04:85:a3:5f:12:0d:aa:c5:09:ac:9f:52:
                    91:38:f8:2b:5e:43:37:7b:03:34:e0:eb:4e:ad:39:
                    6c:bf:b5:04:62:60:5d:eb:45:66:67:01:ba:ff:26:
                    c4:57:99:ff:ad:d4:45:ba:8d:83:78:67:4c:6c:5f:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D2:BE:07:7E:F3:19:1B:7E:1D:36:22:6F:D5:D6:D7:54:D2:70:DE
            X509v3 Authority Key Identifier:
                keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:6f:71:f8:fe:a0:1a:af:62:d4:71:57:1c:20:0c:7e:c8:
         9e:01:ef:bd:3f:96:9b:83:68:38:e7:e6:53:e1:b3:a0:64:af:
         93:1b:75:a1:e4:04:a5:8f:55:60:33:66:18:e4:9e:28:e0:fb:
         4f:90:32:ca:c1:02:1b:01:40:0c:da:1a:10:e0:f5:02:f2:cc:
         e3:6e:1e:9c:26:dd:dd:5d:70:db:8b:22:63:d9:64:1c:e5:fd:
         75:19:b7:8d:14:64:09:6d:3a:a6:80:de:6b:c1:44:20:ed:34:
         a4:3b:e4:bb:9b:6e:ea:8e:b3:38:bc:f3:25:c4:b2:39:a0:ab:
         e7:90:9a:f3:66:e2:6f:d7:5d:6a:e0:9d:57:7f:29:7c:02:72:
         3a:ee:c4:91:c7:c1:ff:6d:72:f4:36:b4:aa:ad:3c:24:82:3e:
         2f:fa:47:30:dc:06:a5:db:6f:83:42:05:ff:d4:00:96:7a:5c:
         03:4b:7c:31:f7:89:40:83:50:15:6a:7a:ab:f1:03:0c:fc:81:
         ec:da:79:37:58:a4:d0:e4:73:f2:e9:f6:8d:d4:d5:96:35:cf:
         aa:31:ba:10:94:3a:b3:5e:6b:cd:e5:ce:90:0b:d7:99:f8:e5:
         2f:78:5c:d8:9f:02:28:b4:b8:1e:ae:f3:3d:20:fe:26:12:d5:
         1a:b5:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:01 2024 by rpki-client on console-ams.rpki-client.org